Fraudulent messages that impersonate a trusted brand or person to trick you into revealing credentials, data, or money.
Phishing is the umbrella technique behind most digital fraud: a message that looks like it comes from a legitimate source — a company, a recruiter, a bank — designed to make you click a malicious link, open an attachment, or hand over sensitive information.
In a hiring context, phishing usually arrives as a fake job offer or onboarding email that routes you to a counterfeit login page or a form requesting your Social Security number and bank details. The giveaway is almost always the sender address and the destination URL, not the polish of the message itself.
What it looks like
An email from “[email protected]” congratulating you on a role and linking to “g00gle-careers.verify-now.com” to “confirm your identity.”
Red flags
- Sender uses a personal or misspelled look-alike domain
- Urgent call to click a link or download a file
- Requests credentials, SSN, or bank details
Deep-dive guide
Job Board Credential Phishing: Fake Login Pages That Steal Your Accounts
Frequently asked questions
What is phishing in simple terms?
Phishing is when a scammer pretends to be someone you trust — a company, recruiter, or bank — to trick you into clicking a bad link or giving up personal information or money.
How do I recognize a phishing email?
Check the real sender address (not just the display name), hover over links to see where they actually go, and be suspicious of urgency and any request for credentials or payment details. When in doubt, contact the company through its official website, not the email.